How to outsmart a Teenager

  • Megallica
  • Novice
  • Novice
  • Megallica
  • Posts: 28
  • Loc: Scottsdale, AZ

Post 3+ Months Ago

Ok. I had a computer brought to me a while back and was asked to install Net Nanny on the machine to prevent the teenage son from asking stuff he shouldn't.

Well the PC is once again in my office and wouldn't you know, the little bugger not only bypassed Net Nanny, but removed it from the system completely and gave himself admin rights. I have removed his rights and changed the passwords to the admin and parents account, and will reinstall Net Nanny shortly... Here's where it gets tricky...

I'm almost certain I know how he bypassed the system, and in order to prevent it from happening again, I need to remove the Run command from the start menu and disable the Registry for His account ONLY.
1. Can that be done?
2. How do I do it.

I know how to disable both globally, I need to do it for just one account on the system.
Also, anyone have any other savvy ideas on how to prevent him from regaining access? i.e. via Thumb/external drives, proxy sites, etc.

Thanks!
  • Don2007
  • Web Master
  • Web Master
  • Don2007
  • Posts: 4923
  • Loc: NY

Post 3+ Months Ago

Forget about it. Are you going to disable the CDROM too? You didn't mention that. All he has to do is boot with a Live CD and all your policies in the registry are worthless. He can look at porn all day.

His parent(s) are going about it all wrong. Turning the PC into an etch-a-sketch won't work. If they were street wise themselves, they would be teaching him how to handle things and they wouldn't be trying to shelter him.
  • Megallica
  • Novice
  • Novice
  • Megallica
  • Posts: 28
  • Loc: Scottsdale, AZ

Post 3+ Months Ago

I agree completely Don, but it isn't my place to say anything about it. They are paying me to work on their PC not give parenting advice.

I'd like to think that he wouldn't know how to create a bootable CD or even know to look how to do it... Hopefully the mass deterrent will be enough.

Besides, After I've done all I can, I can wash my hands of the whole situation and not worry about it again.
  • joebert
  • Fart Bubbles
  • Genius
  • User avatar
  • Posts: 13504
  • Loc: Florida

Post 3+ Months Ago

The key to out-smarting a teenager, is letting them think they've won without making it too easy.

If administrative functions were setup to run through a virtual machine and changes were never "actually" applied until a hotkey or something was used, this kid would be scratching his head for awhile. If he's not, he's probably the one who should be administrating the system anyways. lol
  • Megallica
  • Novice
  • Novice
  • Megallica
  • Posts: 28
  • Loc: Scottsdale, AZ

Post 3+ Months Ago

Yes, while that would be very entertaining to watch. The customer would not pay for it.

Can what I'm asking be done?
  • Don2007
  • Web Master
  • Web Master
  • Don2007
  • Posts: 4923
  • Loc: NY

Post 3+ Months Ago

I do all kinds of jobs for people, not just computers and I always tell the customer when he's wasting his money, even if it means that I don't get the job.

You're in that position now. The customer is wasting his money. I think you should be honest and tell them that because no matter what you do, their son will probably find a way around it.

I'm sure you're an honest business man and doing that would prove it.

All that being said, what you want to do requires registry changes to disable USB ports but I don't know if they can be done based on a profile or if the changes are global.

Joebert has a point about a virtual server type thing. I read something about using dyndns as an HTTP proxy and setting the filters there. I never tried it.
  • grinch2171
  • Moderator
  • Genius
  • User avatar
  • Posts: 6810
  • Loc: Martinsburg, WV

Post 3+ Months Ago

Here you go:

To remove the run command:
GrinchyNet.net wrote:
1. Navigate to [HKEY_CURRENT_USER\​Software\​Microsoft\​Windows\​CurrentVersion\​Policies\​Explorer]
Create a new DWORD value, or modify the existing value, called “NoRun” and set it to ‘1’


Once you remove the run command they cannot access the registry. You may want to take a look at something I wrote for disabling more stuff. You would also have to disable the task manager too since the wily teenager would be able to run regedit from there.
  • Don2007
  • Web Master
  • Web Master
  • Don2007
  • Posts: 4923
  • Loc: NY

Post 3+ Months Ago

Grinch, don't forget, he wants to do it by profile since more than one person uses the PC and as I said, if he boots from a live CD, it's all for nothing. I wonder if the boy is reading our posts.
  • grinch2171
  • Moderator
  • Genius
  • User avatar
  • Posts: 6810
  • Loc: Martinsburg, WV

Post 3+ Months Ago

You could do it by profile but that is more tedious.

Kids are smart and will eventually figure out how to get around anything you put in place.
  • UniquelyYoursPC
  • Web Master
  • Web Master
  • User avatar
  • Posts: 2997
  • Loc: Canada "A"

Post 3+ Months Ago

vista? i have not played with the setting much but the user account controls in visa can do a lot that net nanny can do.
  • grinch2171
  • Moderator
  • Genius
  • User avatar
  • Posts: 6810
  • Loc: Martinsburg, WV

Post 3+ Months Ago

The built-in parental controls in Vista are pretty good and not easy to get around. But i don't recommend moving to Vista just for that reason.
  • Megallica
  • Novice
  • Novice
  • Megallica
  • Posts: 28
  • Loc: Scottsdale, AZ

Post 3+ Months Ago

I agree with everything you guys are saying. Thanks for the tips. I will ask the user if this is really what she wants to do. But either way, just for S&G, how do I do it for a user only? I may not use it for this job, but it may come in handy someday.
  • grinch2171
  • Moderator
  • Genius
  • User avatar
  • Posts: 6810
  • Loc: Martinsburg, WV

Post 3+ Months Ago

Actually, my post above on the registry setting will affect only the user logged in. But you have to be logged in as that user in order to do it since you are messing with the current user registry settings.
  • Megallica
  • Novice
  • Novice
  • Megallica
  • Posts: 28
  • Loc: Scottsdale, AZ

Post 3+ Months Ago

Awesome. Thanks Grinch. You too Don!


BTW - Grinch... Nice site! LOL
  • IcyDragoon
  • Student
  • Student
  • IcyDragoon
  • Posts: 65

Post 3+ Months Ago

how about lock the bios settings, order the boot sequence, and create a limited account with proper parental software?
  • mantonino
  • Novice
  • Novice
  • mantonino
  • Posts: 31
  • Loc: Syracuse

Post 3+ Months Ago

The funny thing is that the kid probably went to a forum just like this and wrote

"I think my kid disabled my admin rights - is there a way to get control of my computer back?"

and someone helped him bypass it. ;)
  • IcyDragoon
  • Student
  • Student
  • IcyDragoon
  • Posts: 65

Post 3+ Months Ago

LoLx, well then the kid is learning :)
which is a good thing
  • paul8368
  • Novice
  • Novice
  • paul8368
  • Posts: 27
  • Loc: UK

Post 3+ Months Ago

Personally I would switch from net nanny to something less commmon that all the teenagers already know how to bypass. I have 3 kids myself and I don't use net nanny or any other restrictive software. Not becasue I don't want them to be safe but rather I apply restrictions through makafee's parental controls to all acccounts not just theirs. I know however its easy to get passed so I take the parental approach if you do something wrong you'll be banned from using the PC. They love playing flash games so much they don't take the risk.

I did do one other thing as well mind you. I moved the PC from my sons room downstairs so everyone can see what they are doing.

I find the problems only tend to come now when their friends send something and they profer some appropriate expletive and i know whats happening straight away. The only dilema I have then is whether to tell the other childs parents or not.

One final point, teenagers are intelligent, they spend all their day trying to do what their teacher asks the easy way instead of spending time on it. If they want to get past parental controls they will so you are better off being a parent helping them achive rather than restricting what they can do.

Ona nother note perhaps you shoudl consider employing this child prodegy when he's old enough, sounds like he's up to the job already

Paul
  • jflynn
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2305
  • Loc: Baker City, Oregon

Post 3+ Months Ago

sounds like the kid enjoys getting around the blocks more then the porn
  • Bozebo
  • Expert
  • Expert
  • User avatar
  • Posts: 709
  • Loc: 404

Post 3+ Months Ago

if hes looking at porn then hes not a kid. anyone can get past that type of stuff on a home computer - unless it is custom programmed and ends up making the system useless
  • joebert
  • Fart Bubbles
  • Genius
  • User avatar
  • Posts: 13504
  • Loc: Florida

Post 3+ Months Ago

mantonino wrote:
The funny thing is that the kid probably went to a forum just like this and wrote

"I think my kid disabled my admin rights - is there a way to get control of my computer back?"

and someone helped him bypass it. ;)


:lol: My thoughts exactly.
  • dyfrin
  • Expert
  • Expert
  • User avatar
  • Posts: 503
  • Loc: WI

Post 3+ Months Ago

a few things you can do:
password the bios.
remove boot from cd as an option [not available on all mobo]
change regedit.exe and regedit32.exe permissions to deny all for that user.
(they can get around it with change ownership.. but disabling that may work)
  • OdysseyHouse
  • Born
  • Born
  • OdysseyHouse
  • Posts: 1

Post 3+ Months Ago

Outsmarting teenagers... Difficult but doable. We have to do it everyday... We work in substance abuse.

Post Information

  • Total Posts in this topic: 23 posts
  • Users browsing this forum: No registered users and 66 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.